Privacy Policy

Screna Tech Inc. ("Company," "we," "us") provides the services available at https://www.screna.ai/ and affiliated applications, communications, and other instances where we link to this Privacy Policy (collectively, the "Services").

This Privacy Policy explains how we process personal data when providing the Services. Any capitalized term not defined here has the meaning in our Terms of Service. As used in this Policy, "including" means "including but not limited to."

1) Data Controller

Screna Tech Inc. is the data controller for the Services.

Contact: operations@screna.ai

Address: 42 HANSOM RD, BASKING RIDGE, NJ 07920

2) Personal Data We Process and How We Use It

We process personal data to provide the Services (e.g., running mock interviews, generating transcripts, and delivering AI-based feedback). The personal data we collect varies depending on how you use the Services.

You are not required to provide personal data, but if you do not provide certain data, we may be unable to provide parts of the Services (for example, we cannot generate interview feedback without your interview inputs).

3) Categories of Personal Data We Collect

4) How We Use Personal Data (Key Purposes)

We use personal data to:

• Provide the Services (run mock interviews, generate transcripts, deliver feedback, maintain your account, and other Services).
• Personalize and improve the Services (recommend practice plans, improve rubrics, fix bugs, optimize performance, and other Services).
• Customer support (answer requests, troubleshoot, communicate with you).
• Security and safety (prevent fraud/abuse, enforce Terms, protect users).
• Payments and subscriptions (manage billing and plan access).
• Marketing (limited) (send product updates and promotional communications where permitted).
• Legal compliance (respond to lawful requests, protect rights).

5) AI Features and Automated Processing

The Services may offer AI features that generate content such as: interview feedback, summaries, suggested answers, question banks, and coaching plans ("AI Outputs").

• Inputs to AI: your interview responses, prompts, uploaded materials (like resumes), and, if enabled, transcripts and recordings.
• Outputs: AI-generated analyses, scores, and recommendations.
• Human review: we may review limited data for quality assurance, safety, debugging, and support, with access controls and logging where appropriate.

Model training / improvement:

• Default approach: we do not use your audio/video recordings to train foundation models.
• We may use de-identified and/or aggregated usage metrics to improve the Services.
• If we offer an opt-in to use certain content (e.g., transcripts) to improve AI quality, we will present it clearly in-product and you can opt out.

AI limitations: AI is evolving and may produce inaccurate or inappropriate output. You should independently review AI Outputs before relying on them.

6) When and How We Share Personal Data

We do not sell personal data in the traditional sense. We may share personal data with:

A. Service Providers (Processors)

Vendors who help us operate the Services (e.g., hosting, databases, analytics, email delivery, customer support tooling, payment processors, transcription/AI infrastructure). They are contractually restricted to process personal data on our instructions.

B. Legal, Safety, and Rights

We may disclose data if we believe in good faith it is necessary to:

• Comply with law, regulation, legal process, or government request
• Enforce our Terms, investigate abuse, or protect the security of the Services
• Protect the rights, property, or safety of users, the public, or us

C. Business Transfers

If we're involved in a merger, acquisition, financing, or sale of assets, we may transfer data as part of that transaction subject to standard protections.

D. With Your Direction

For example, if you export a report, share a link with a mentor, or connect third-party integrations.

E. Google User Data

When you connect your Google account to the Services (e.g., via Google OAuth / Sign in with Google), we may receive and process certain Google account data, including your name, email address, and profile picture, solely to authenticate your identity and provide the Services. We do not sell or use Google user data for advertising purposes.

Google user data may be disclosed to the following categories of third parties, solely to the extent necessary to provide the Services:

• Authentication Infrastructure Providers — cloud hosting and identity/authentication service providers (e.g., session management, token storage) that process data on our behalf under data processing agreements.
• Core Platform Service Providers — backend infrastructure, database, and application hosting vendors necessary to operate and deliver the Services (e.g., user account creation and login flow).
• Legal and Compliance Disclosures — as required by applicable law, regulation, or valid legal process (Section 6B above).

We do not transfer Google user data to any other third parties. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

7) Cookies and Similar Technologies

We may use cookies and similar technologies for:

• Strictly necessary: login/session, security
• Functional: preferences, language, settings
• Analytics: product performance and feature usage
• (Optional) Advertising: if we run ads, we will describe the partners and choices here

You can manage cookies through browser settings and (where offered) our cookie preferences tool. Some features may not work without necessary cookies. We may honor Global Privacy Control (GPC) where required by law.

8) Processing Table (Purpose, Data, Sharing, Legal Basis)

9) Data Retention

We may keep personal data for the purposes in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

• You can delete recordings and certain content in the Personal Center.
• If you delete your account, we delete or de-identify personal data within 63 days, subject to legal/backup/security exceptions.
• Backups may persist for a limited period before being overwritten.

10) Security Safeguards

We may use reasonable administrative, technical, and physical safeguards (e.g., access controls, encryption in transit, monitoring). No system is 100% secure; you are responsible for keeping your credentials confidential.

11) Your Rights and Choices

Depending on your location, you may have rights to:

• Access, correct, or delete personal data
• Object to or restrict processing
• Data portability
• Withdraw consent (where processing is based on consent)

12) US State Privacy Disclosures (CA/CPRA and other states)

Sale/Share for targeted advertising:

• We do not "sell" personal information. We do not "share" personal information for cross-context behavioral advertising.
• If we later use ad networks for targeted ads, we will update this section and provide an opt-out.

Sensitive personal information: We do not use sensitive personal information to infer characteristics about you for targeted advertising. If we process sensitive data (e.g., resume content), we do so to provide the Services.

Non-discrimination: We do not discriminate for exercising privacy rights.

13) International Transfers

If you access the Services from outside the United States, your personal data may be transferred to and processed in the United States or other countries where our service providers operate.

If GDPR applies, we rely on transfer mechanisms such as Standard Contractual Clauses and supplementary measures, as appropriate.

14) Children / Minimum Age

The Services are not intended for users under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us to request deletion.

15) Third-Party Links and Integrations

If the Services link to third-party sites or integrate third-party tools, their privacy practices are governed by their policies. We are not responsible for third-party privacy practices.

16) Changes to This Policy

We may update this Policy from time to time by posting an updated version. If we make a material change, we will provide notice (e.g., in-product or by email) as required. Your continued use of the Services means you accept the updated Policy.

17) Conflicts; Governing Terms

In the event of any conflict between this Privacy Policy and the Terms of Service of the Company, the Terms of Service shall control.

18) Contact Us